Applications & web

Applications & web reports offer visibility into application and internet usage on your network. You can review usage patterns, risks, and blocked activity across users, applications, and web traffic.

Application risk meter

The firewall calculates scores based on the risk level and number of hits of individual applications. The application risk meter is based on the average score of all application traffic.

When the meter is closer to the red mark, the network traffic includes more high-risk applications, indicating a high risk of compromise. When the meter is closer to the green mark, the network traffic includes more low-risk applications, indicating a low risk of compromise.

Note

Reports show the risk level and number of hits of individual applications.

Setting	Description
User app risks & usage	Usage of various applications and associated risks.
Cloud application usage	By classification, category, usage, content, source zones, and destination countries.
Blocked user apps	Blocked attempts for accessing various applications.
Synchronized applications	Applications detected on endpoints that are connected through Security Heartbeat.
Web risks & usage	Web usage on your network and associated risks.
Web policy overrides	Authorized users who can override web policies and blocked websites and web categories.
Blocked web attempts	Unsuccessful attempts made by users to access blocked sites.
Search engine	User search patterns.
Web content	Content filter matches and associated details. Sophos Firewall always blocks web pages categorized as highly objectionable criminal activity and hides the domain name in logs and reports.
Web server usage	Application, web, internet, and FTP traffic.
Web server protection	Security status of your hosted web servers, including attacks and sources.
User data transfer	User traffic.
FTP usage	FTP activity.
FTP protection	Malicious FTP activity.